When Certificate Autoenrollment version 1.0.0.652 is installed on a OSX machine the permissions on files used for starting processes are incorrect.
They should be 644
-rw-r--r-- 1 root wheel 451 Oct 15 2012 com.quest.qcert.UserApply.plist
-rw-r--r-- 1 root wheel 486 Oct 15 2012 com.quest.qcert.ImportTrustedRoots.plist
-rw-r--r-- 1 root wheel 476 Oct 15 2012 com.quest.qcert.MachineApply.plist
Instead they are 664
-rw-rw-r-- 1 root wheel 555 May 30 2013 com.quest.qcert.UserApply.plist
-rw-rw-r-- 1 root wheel 590 May 30 2013 com.quest.qcert.ImportTrustedRoots.plist
-rw-rw-r-- 1 root wheel 580 May 30 2013 com.quest.qcert.MachineApply.plist
As a result they will not function correctly since the operating system considers this to be too permissive.
WORKAROUND
To resolve this issue please modify the permission of these files to 644 instead of 664. The following commands will work when executed with root permissions.
chmod 644 /Library/LaunchDaemons/com.quest.qcert.MachineApply.plist
chmod 644 /Library/LaunchDaemons/com.quest.qcert.ImportTrustedRoots.plist
chomd 644 /Library/LaunchAgents/com.quest.qcert.UserApply.plist
STATUS
Issue will be fixed in a future version of Certificate Autoenrollment.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center